A fraud alert asks lenders to confirm your identity before they open new credit in your name. A credit freeze goes further: it stops new creditors from seeing your credit report at all until you lift it. Both are free, both are available in the US, and neither is a complete shield. The right pick depends on whether you plan to borrow soon, whether your data has already leaked, and how much friction you can live with.
This guide explains how each tool works, who qualifies for which type of alert, what neither one stops, and how to place them without landing on a fake bureau website along the way.
TL;DR
- A fraud alert lets lenders still see your report but requires them to verify your identity first. An initial alert lasts up to one year, and you place it with just one bureau.
- A credit freeze blocks most new-credit access to your report until you lift it. You have to place it separately with Equifax, Experian, and TransUnion.
- If your Social Security number was exposed in a breach, a freeze is usually the stronger choice. If you are about to apply for a mortgage or car loan, an alert is easier to live with.
- Neither tool stops someone from taking over an account you already have, so you still need to watch your statements.
- Use only the official bureau sites. Fake lookalike pages are a common trap for people in a hurry.
Table of Contents
- Fraud alert vs. credit freeze at a glance
- How a fraud alert works
- How a credit freeze works
- What neither tool protects you from
- Which one fits your situation
- How to place a fraud alert or freeze
- Our perspective
- Check the site before you share your Social Security number
- FAQ
- Sources
Fraud alert vs. credit freeze at a glance
The table below summarizes the differences using the FTC's guidance on credit freezes and fraud alerts and the CFPB's guidance, both cited in more detail further down.
| Fraud alert | Credit freeze | |
|---|---|---|
| What it does | Tells businesses to verify your identity before granting new credit | Prevents new creditors from accessing your report while it is in place |
| Can lenders see your report? | Yes, after taking verification steps | Generally no, unless you temporarily lift the freeze |
| Cost | Free | Free |
| How many bureaus to contact | One; it must notify the other two | All three, separately |
| How long it lasts | Initial: one year. Extended: seven years. Active-duty: one year | Until you lift or remove it |
| Who can place it | Initial: anyone who is or suspects they may be affected by identity theft. Extended: confirmed victims with a report | Anyone, at any time |
| Effort when you apply for credit | Low; expect a call or extra ID check | Higher; you lift it first, then put it back |
Think of the alert as a speed bump and the freeze as a locked gate. A speed bump slows down a determined thief only if the lender actually follows the verification step. A locked gate does not depend on anyone's diligence, but you carry the key and have to use it every time you want in.
How a fraud alert works
A fraud alert is a notice added to your credit file. The FTC explains that it does not block access to your credit report; instead, businesses must take steps to verify your identity before granting new credit. In practice that might mean a phone call to a number you provided, or an additional identity check at the point of application.
The CFPB adds specifics: an initial fraud alert requires creditors to verify identity before they open a new account, issue an additional card, or increase an existing credit limit, and it lasts up to one year unless removed sooner.
The three types of fraud alerts
According to the FTC, there are three kinds, and all are free:
- Initial fraud alert. Available to anyone who is or suspects they may be affected by identity theft. It lasts one year and can be renewed.
- Extended fraud alert. For confirmed identity-theft victims who have an FTC identity theft report or a police report. It lasts seven years and can be renewed with renewed documentation.
- Active-duty alert. For active-duty servicemembers. It lasts one year and can be renewed for the length of the deployment.
You do not need to prove anything to get the initial alert, which makes it a sensible first move when you suspect something is off but cannot yet confirm it. An extended alert makes sense once you have filed a report and are dealing with a real case.
The practical advantage: one call covers all three bureaus
For a fraud alert, you contact just one of Equifax, Experian, or TransUnion, and that bureau must notify the other two. Michigan's consumer protection office points out the operational benefit: because the alert is forwarded, you do not have to guess which bureau a creditor will consult. That matters because lenders choose their bureau, not you.
How a credit freeze works
A freeze is blunter. With one in place, nobody can open a new credit account in your name, and that includes you, until you lift it. The FTC says anyone can place a freeze at any time, and you have to contact Equifax, Experian, and TransUnion individually. The CFPB confirms you can freeze and unfreeze your records for free and that you must contact each company separately.
What the freeze leaves alone is worth knowing before you rely on it. Michigan's official guidance says existing creditors, debt collectors acting for them, and government agencies in limited circumstances may still access the report. It also states that a freeze does not affect your score and does not block your free annual credit reports.
Freezes also do not expire on a timer. Massachusetts' official guidance says a freeze stays until you lift or remove it, and that no one may charge you to place, lift, or remove one under federal and Massachusetts law. You can lift it temporarily and put it back when you are done.
Why you might feel the freeze in daily life
The CFPB notes that lenders usually run a hard credit check when you apply for a new loan, and that the inquiry will affect your score, while an existing lender's pull is a soft inquiry that will not affect your score. A freeze changes none of that math. What it changes is timing: before any new application, you need to lift the freeze at the right bureau, which takes a few minutes online but must be remembered.
Who else looks at your report matters too. The CFPB says the Fair Credit Reporting Act allows access for permissible purposes such as credit transactions, insurance, employment with your written consent, rental applications, government benefits or licenses, court orders, and prescreened offers. So a new landlord, insurer, or employer who needs a report can be affected by a freeze. Plan ahead: lift it for the bureau they use, then restore it afterward. Ask the landlord or employer which bureau they pull from, so you do not have to lift all three.
What neither tool protects you from
This is the part that most comparison pages skip, and it is where people get a false sense of security.
The CFPB is direct about it: a freeze stops new creditors from accessing your file until you lift it, but it does not prevent identity thieves from taking over existing accounts. If a criminal gets into your current bank login or card account, a credit freeze will not stop them. The same logic applies to a fraud alert, which addresses new credit decisions and extra verification, not control of accounts you already hold.
So a freeze or alert handles one threat: someone opening new credit in your name. It does not cover:
- Account takeover. Stolen passwords, SIM swaps, or a phished card number used on an account that already exists.
- Fraudulent charges on your current cards. Review statements regularly and enable transaction alerts.
- Scam payments you make yourself. If you are tricked into paying a fake store, no credit file setting helps.
That last one is where website checks come in. Many identity-theft cases start with a convincing but fake page that collects your Social Security number, card details, or login. Our guides on verifying a payment page before you pay and spotting a clone shopping site cover the habits that keep your data from leaking in the first place.
Which one fits your situation
There is no single winner. Here is how the choice usually plays out.
Choose a freeze if your data has leaked
The FTC says a freeze is especially important if your Social Security number or other information is exposed in a data breach or misused by an identity thief. Your Social Security number does not change, so a leaked one stays useful to criminals for years. A freeze keeps working long after an alert would have expired.
Choose a freeze if you are not borrowing anytime soon
The FTC notes that freezes are generally best for people who are not planning to take out new credit, often including older adults, people under guardianship, and children. If you have no plans for a loan, the occasional hassle of lifting a freeze costs you almost nothing.
Choose a fraud alert if you need to keep applying for credit
The same FTC page says an alert lets you keep access to your credit. If you are shopping for a mortgage, financing a car, or opening new cards in the next few months, an alert offers a layer of protection without making you lift and restore freezes at each bureau. Expect a lender to call you or ask for additional proof of identity, so keep your phone number current.
Choose an alert first if you only suspect a problem
The initial alert requires no proof. If you got a strange letter, a denied application you did not make, or a notice of a data breach that may or may not involve you, one phone call or online form buys time while you investigate.
Use both when the stakes are high
They are not mutually exclusive. Someone who is a confirmed victim might add an extended alert for the seven-year paper trail and also freeze all three files. Because a freeze blocks most new-credit access anyway, the alert adds a record of your identity-theft status and the extra verification requirement, which is useful if you later lift the freeze.
How to place a fraud alert or freeze
The steps are short. The danger is in the search results, since scam pages imitate bureau portals to harvest exactly the data you are trying to protect.
- Type the bureau's address yourself or use the link in an official government guide, rather than clicking an ad. Before entering anything, you can run the address through our free website trust checker to see its trust score and risk breakdown. We have published trust reports on Equifax.com and Experian.com if you want to see what a verified result looks like.
- For a fraud alert, contact one bureau only. It must notify the other two.
- For a freeze, repeat the process at Equifax, Experian, and TransUnion. Save the confirmation and any PIN or login the bureau gives you somewhere secure, such as a password manager.
- Confirm it took. Log in to each bureau or request confirmation so you know all three files are covered.
- Set a reminder. Put your initial alert's one-year renewal date in your calendar. Freezes do not expire, but you will want a note about where your PINs live.
Lifting or removing a freeze
The FTC says a freeze can be temporarily lifted and reinstated when you are done. Before a new application, find out which bureau the lender uses, lift the freeze there, and restore it after the decision. If you would rather not guess, lift all three for a short window and re-freeze afterward. No fee applies to any of these steps.
If you are already a victim
If you have found accounts you did not open, an initial alert is only the first step. You will need to file a report, dispute the accounts, and consider an extended alert. Our partner-free summary is simple: follow the government's recovery plan, and the identity theft recovery steps checklist walks through what to do in what order.
Our perspective
We look at thousands of websites for trust signals, and the pattern we see most often is simple: people protect their credit file after a breach but stay exposed at the moment of data entry. A freeze is a strong tool, and we recommend most people consider one, especially after a leak involving a Social Security number. But it is a tool for one specific problem.
The reality is that identity theft rarely begins at a credit bureau. It begins on a page that looks legitimate and is not: a fake tax site, a clone store, a fake login. A freeze limits the damage once your details are out, but it does not prevent you from handing them over. That is why we pair credit advice with habits that cut off the leak, such as checking a site before typing anything sensitive. Our guides on business identity fraud and the fake IRS website show how convincing these pages can be.
We also keep one rule for ourselves: the verdict is never for sale. We do not take payments or pay-for-a-better-score offers, so a score reflects signals, not money. Treat any site that promises to "verify" your identity in exchange for upfront data with the same skepticism.
— Nick
Check the site before you share your Social Security number
Whether you choose an alert or a freeze, you will end up typing sensitive details into a website at some point: a bureau portal, a lender, a new retailer. Paste the address into the Verified.fyi website trust checker first. It analyzes 200+ security, ownership, and reputation signals, returns a 0 to 100 trust score with a verdict from dangerous to trusted, and needs no registration. It takes seconds, and it is free.
If you run a small business and want customers to see that your own site has been checked, there is also a trust badge option.
FAQ
Does a fraud alert hurt your credit score?
No. A fraud alert is a notice on your file, not a mark against your payment history, and it does not stop lenders from viewing the report once they verify your identity. What can happen is a short delay on a new application while the lender confirms it is really you.
Can someone steal my identity if my credit is frozen?
Yes, in some ways. The CFPB says a freeze stops new creditors from accessing your file but does not prevent thieves from taking over existing accounts. Keep monitoring your bank and card statements, use strong unique passwords, and be careful where you enter personal details.
Do I need to freeze all three bureaus?
Yes, if you want a full freeze. The FTC says you must contact Equifax, Experian, and TransUnion, and the CFPB says you contact each separately. A fraud alert is different: placing it with one bureau is enough because that bureau must notify the other two.
How long does a fraud alert last compared with a freeze?
An initial alert lasts one year and can be renewed, an extended alert lasts seven years, and an active-duty alert lasts one year and can be renewed for the deployment. A freeze stays in place until you lift or remove it.
Is it free to freeze and unfreeze my credit?
Yes. Both the FTC and the CFPB say placing, lifting, and removing a freeze costs nothing, and fraud alerts are free as well. If a site asks you to pay for either, leave and check it with a trust checker before sharing anything.
Sources
- Credit Freezes and Fraud Alerts, FTC Consumer Advice
- Fraud alerts and credit freezes: What's the difference? FTC
- What is a credit freeze or security freeze on my credit report? CFPB
- When will my lender run or obtain a copy of my credit report? CFPB
- Who can request to see my credit report? CFPB
- What do I do if I am a victim of identity theft? CFPB
- Credit Freeze; Fraud Alert; & Credit Monitoring, Michigan Department of Attorney General
- Freeze your credit, Mass.gov